68 matches found
CVE-2021-28181
The specific function in ASUS BMC’s firmware Web management page Remote video configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...
Wordpress CleanTalk SQL注入漏洞
Wordpress CleanTalk is an application plugin for Wordpress. Provides a free anti-spam plugin that works with the premium Cloud AntiSpam service cleantalk.org. Anti-Spam by CleanTalk WordPress plugin before 5.149 suffers from a SQL injection vulnerability that stems from entering unverified...
CVE-2021-22305
There is a buffer overflow vulnerability in Mate 30 10.1.0.126C00E125R5P3. A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service...
CVE-2021-22305
There is a buffer overflow vulnerability in Mate 30 10.1.0.126C00E125R5P3. A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service...
CVE-2021-22302
There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through specific app. This could cause out-of-bound, compromising normal service...
CVE-2021-22305
There is a buffer overflow vulnerability in Mate 30 10.1.0.126C00E125R5P3. A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service...
CVE-2021-22305
There is a buffer overflow vulnerability in Mate 30 10.1.0.126C00E125R5P3. A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service...
CVE-2020-9092
HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module...
CVE-2020-7008
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources...
PT-2019-2028 · Python +8 · Python +8
Name of the Vulnerable Software and Affected Versions: Python versions 2.x through 2.7.16 Description: The issue is related to the urllib module in Python, which supports the local file: scheme. This makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs. A...
2345 Security Guard Denial of Service Vulnerability (CNVD-2018-07355)
2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345Wrath.sys in 2345 Security Guard 3.6. The vulnerability arises due to an unverified input value from IOCtl 0x00222098. A local user...
CVE-2017-12718
A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify input buffer size prior to copying, leading to a buffer overflow, allowing remote code execution on t...
Max Secure Anti Virus Denial of Service Vulnerability
Max Secure Anti Virus is a specialized anti-spyware software for removing adware and spyware from your PC. A denial of service vulnerability exists in the driver file SDActMon.sys in Max Secure Anti Virus 19.0.3.019. The vulnerability arises due to an unverified input value from IOCtl 0x220019. A...
eScan Anti-Virus Denial of Service Vulnerability (CNVD-2018-02624)
eScan Anti-Virus is a comprehensive anti-virus and content security solution. A denial of service vulnerability exists in the driver file econceal.sys in eScan Antivirus 14.0.1400.2029. The vulnerability arises due to an unverified input value from IOCtl 0x830020F8. A local user can exploit this...
eScan Anti-Virus Denial of Service Vulnerability
eScan Anti-Virus is a comprehensive anti-virus and content security solution. A denial of service vulnerability exists in the driver file econceal.sys in eScan Antivirus 14.0.1400.2029. The vulnerability arises due to an unverified input value from IOCtl 0x8300210C. A local user can exploit this...
Max Secure Anti Virus Denial of Service Vulnerability (CNVD-2018-02611)
Max Secure Anti Virus is a specialized anti-spyware software for removing adware and spyware from your PC. A denial of service vulnerability exists in the driver file MaxCryptMon.sys in Max Secure Anti Virus 19.0.3.019. The vulnerability arises due to an unverified input value from IOCtl 0x220019...
eScan Anti-Virus Denial of Service Vulnerability (CNVD-2018-02623)
eScan Anti-Virus is a comprehensive anti-virus and content security solution. A denial of service vulnerability exists in the driver file econceal.sys in eScan Antivirus 14.0.1400.2029. The vulnerability arises due to an unverified input value from IOCtl 0x830020E0 or 0x830020E4. A local user can...
Max Secure Anti Virus Denial of Service Vulnerability (CNVD-2018-02614)
Max Secure Anti Virus is a specialized anti-spyware software for removing adware and spyware from your PC. A denial of service vulnerability exists in the driver file MaxProtector32.sys in Max Secure Anti Virus 19.0.3.019. The vulnerability arises due to an unverified input value from IOCtl...
Zillya! Antivirus Denial of Service Vulnerability (CNVD-2018-02617)
Zillya! Antivirus is a security solution designed to help protect your computer from viruses and other malware threats. A denial of service vulnerability exists in the driver file zef.sys in Zillya! Antivirus 3.0.2230.0. The vulnerability arises due to an unverified input value from IOCtl...
K7 AntiVirus Denial of Service Vulnerability (CNVD-2018-01137)
K7 AntiVirus is home user friendly virus removal software that protects computers from viruses, Trojans, malware and spyware threats. A denial of service vulnerability exists in the driver file K7Sentry.sys in K7 AntiVirus 15.1.0306. The vulnerability arises due to an unverified input value from...